The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file.
Weakness
The product stores a password in a configuration file that might be accessible to actors who do not know the password.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mednet | Hospira | * | 5.8 (including) |